last executing test programs: 3.881510228s ago: executing program 4 (id=11445): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 3.880858008s ago: executing program 4 (id=11446): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20f328f447cd4a47ac00000000000000000000000900010073797a30000000002c000000160a00000000000000000000000000000900010073797a30000000009438d69174da7e0b000000002c000000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 3.445718659s ago: executing program 2 (id=11460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x10) unshare(0x40004000) 3.384274685s ago: executing program 2 (id=11463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={{0x77359400}}) 3.277869484s ago: executing program 2 (id=11467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x3000000) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000e1000000000000009b000000180000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r7}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="856cd4bddf25010000000d00000002410064703a73797a86ad12128c9c269d43000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x44001) sendmsg$key(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2, 0x0, 0x0, 0x0, 0x20000000000002ba}, 0x10}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) write$char_usb(0xffffffffffffffff, &(0x7f0000000500)="0412c24ec9294c46902b45241d6c6a42577e9fad075cf4e59fadb643762e30271bdb5c55dcac8aa22764fe91af6398e1607335d1e76c7be79e4d0c80a390f704b308647b053f31418a13b3a19fea822d9a9b9e53a3f4020c1958f7e32c14644e3dd257eba669d90871d09c1595c430ded21a6b62deba3bbc574127123063f1e5509e581b0693aece2bb47c248840840bb1c077b5518323214e878e1f41c95c92b3b61f27216d2232403863860ca822675400afa3082864ef0be6493e4de52f3e220afdc5", 0xc4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32], 0x20}}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet6(0xa, 0x806, 0x0) listen(r10, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) 3.027707908s ago: executing program 1 (id=11472): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000001940)=""/4096, 0x1000, 0x0, &(0x7f0000000380)=""/100, 0x64}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0b030a00fcff020002004788aa96a13b", 0x10, 0x0, &(0x7f0000000340)={0x11, 0x1, r5, 0x1, 0x1, 0x6, @link_local}, 0x14) 3.00955016s ago: executing program 1 (id=11473): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="eb9818d8af17de00000000000004000000ff0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r9 = dup2(r8, r8) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r9, 0x1276, 0x0) 2.944494956s ago: executing program 4 (id=11474): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000004224000000000000000000000000000000000000e0506d13f492aca7e5242e092ceb6650f53ad2eaa8b7e645f6c1a55a7c55fda898672b943c5a23980b7a642b8c9d58d4676756080e06cc9aa57824b8b9fe5b4bab16a579478c575ea2f4444f3c9543a6c1027d4dc599ad9bf9574f5d556504da47ea85ec6628429d24ecfc5ea9397493372315bb006dc2c8d84bcac63a3abf0bd94d8aff84430cf2cbc1698e54974d765915302c0e096febeea7ce265ad43b9915fe4217136ec7f9c57531fbaabd219ee57ed73144af880e39b8e428e8fa8170edaca501"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27}}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {}, {0x25}}], {{0x4, 0x1, 0x9, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)) (async) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x0, 0x7, 0x3, 0xff, {{0x12, 0x4, 0x0, 0x2e, 0x48, 0x66, 0x0, 0x3b, 0x77, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @local, {[@timestamp_addr={0x44, 0x14, 0x31, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x43}, 0xcc}, {@broadcast, 0x6c}]}, @rr={0x7, 0xf, 0x2d, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x3e}]}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x2, 0xb, "8e0245b42b62f9903f"}]}]}}}}}) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x6, [@int={0x10, 0x0, 0x0, 0x1, 0x0, 0x58, 0x0, 0x2f, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x1}, @fwd={0x6}, @enum={0x6, 0x8, 0x0, 0x6, 0x4, [{0x10, 0x7f63}, {0x0, 0x8}, {0x10, 0x1}, {0xe, 0x3}, {0x8, 0x800}, {0xd, 0x4}, {0xb, 0x9b5e}, {0x7, 0x3}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x74, 0x0, 0x49, 0x7}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x76, 0x0, 0x45, 0x6}]}, {0x0, [0x0, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000340)=""/230, 0xb2, 0xe6, 0x0, 0x9, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x6, 0xa0, 0x9, 0x2c0, r0, 0x1, '\x00', r6, r7, 0x3, 0x1, 0x5, 0x7, @void, @value, @void, @value}, 0x50) (async) r8 = openat2(r5, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x20500, 0x2, 0x30}, 0x18) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r5) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000880)={'syztnl0\x00', r6, 0x7800, 0x80, 0x4, 0xffff, {{0x2b, 0x4, 0x3, 0x0, 0xac, 0x65, 0x0, 0x68, 0x2f, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x13, 0xfb, [@loopback, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x10, 0xf1, 0x0, 0x4, [0x3ff, 0x2, 0x3]}, @end, @cipso={0x86, 0x21, 0x3, [{0x1, 0x8, "b9812054e19a"}, {0x5, 0xe, "55e3bda944c00c274bda6f81"}, {0x1, 0x5, "7f4467"}]}, @cipso={0x86, 0x13, 0x2, [{0x2, 0x9, "72102816925ae6"}, {0x1, 0x4, "e8ad"}]}, @timestamp_addr={0x44, 0x1c, 0x3b, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010101, 0x247d}, {@multicast2, 0xe0d}]}, @cipso={0x86, 0x23, 0x3, [{0x1, 0x10, "62092140e2bfa2509f69d9939ca9"}, {0x6, 0x4, "ba6b"}, {0x7, 0x9, "0718754951464d"}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000000d00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1050054}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xc4, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x10004085) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x80, 0x700, 0x8, 0x7, {{0xb, 0x4, 0x2, 0x3, 0x2c, 0xf2, 0x0, 0x6, 0x4, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x12, 0x3, 0x3, [{@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @end]}}}}}) (async) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', r11, r12, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.840202775s ago: executing program 4 (id=11475): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'bond_slave_0\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r0, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000940)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x8, 0x11, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3e}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0xc, 0x9, 0x6, 0x50, 0xfffffffffffffffc}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit]}, &(0x7f0000000440)='GPL\x00', 0x5823, 0x9f, &(0x7f0000000500)=""/159, 0x40f00, 0x8, '\x00', r5, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x3, 0x4, 0x6}, 0x10, r6, r0, 0x7, &(0x7f0000000b80), &(0x7f0000000bc0)=[{0x2, 0x2, 0x10, 0x8}, {0x0, 0x2, 0xb, 0x2}, {0x3, 0x5, 0x8, 0xb}, {0x4, 0x1, 0x1, 0x1}, {0x3, 0x5, 0x9, 0x3}, {0x2, 0x4, 0xe, 0xc}, {0x0, 0x5, 0xa, 0x6}], 0x10, 0x9801, @void, @value}, 0x94) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)) unshare(0x60400) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000004000000"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r11, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r12, &(0x7f0000000300)=[{&(0x7f00000000c0)="c057", 0x2}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7b, 0x12, r8, 0x20001000) close_range(r7, 0xffffffffffffffff, 0x0) 2.228586532s ago: executing program 0 (id=11482): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 2.192326576s ago: executing program 0 (id=11483): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x609, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 2.059396198s ago: executing program 0 (id=11484): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20f328f447cd4a47ac00000000000000000000000900010073797a30000000002c000000160a00000000000000000000000000000900010073797a30000000009438d69174da7e0b000000002c000000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 2.058748248s ago: executing program 1 (id=11485): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000001940)=""/4096, 0x1000, 0x0, &(0x7f0000000380)=""/100, 0x64}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0b030a00fcff020002004788aa96a13b", 0x10, 0x0, &(0x7f0000000340)={0x11, 0x1, r5, 0x1, 0x1, 0x6, @link_local}, 0x14) 2.046118269s ago: executing program 1 (id=11486): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) sendto$packet(r3, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r4}, 0x14) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004240)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x40000}, {0x1}], 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000440)=[{&(0x7f00000005c0)="2fff6ec373", 0x5}], 0x1}, 0x40844) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000)=r9, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) 1.92679079s ago: executing program 4 (id=11487): socketpair(0x1e, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a5"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20f328f447cd4a47ac00000000000000000000000900010073797a30000000002c000000160a00000000000000000000000000000900010073797a30000000009438d69174da7e0b000000002c000000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/157], 0xa0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.164066442s ago: executing program 0 (id=11493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000000000000f41f583c78742982816d1658d16286c4cbe958694bf7c9fb59a0a6e524c065aceeefe6bde32042cff20e705315a4a4ae04c500121cb968651bdc09425f466d796d9c414525a09670867f4f58bdc10430c37657608286b45661aa2fcd8f4e9665b47570fef936af28a00a9361e6ecc46ea1247a63cf678c7f40a211722f89e24f26c58496fafc82956f55308ebffe45f433be9e019d6529c53c0869fd31c2a6e91547f9581c69bf6332fed9f8ecfe1f371995237c9f78d25b2ee83891182fd03b1d25e18f886fc2d00e4f9b72fb47062c2f29eb520d7eb49d009a22732e8bbfb9906b68dcc622a2c9172c4ffeb5d3f19fa798085a1071603221a62be5dad6622d688601b8d372d30a9c70559ec5aafc42908a09e8a57de812ef9e83eb32a2351061c6305d90058b4411198b58507c0ccf2df6f22ef28ffae3b9d74abf2a57a71cb921d5edb9fdfb1a658d258b142b96f9bd1ea19fe67e06b46644dca0e42b4528e4a197e4bb99c4199090c98b2586f15f54e2dca3d26a1476ee508d7a4ae6e396def50ec298b266cfa8d7c337eec6a8780de0caa4c904bf848f03c25ec6ec75387c51c50c0902d3dce78d9bbd23773a1513df4252a3a2c70d6567584af377c4cfef4980bff2b50401edbe320acfcf6a38af1d11fe97e734edfab10d783de95058179f2de76e5225f291f26cfb2a6e630f6fba9220"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r6}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.107335847s ago: executing program 1 (id=11494): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 925.328024ms ago: executing program 1 (id=11495): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x101) r1 = openat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x125) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x5, 0x11, 0xa, 0x4a04, r0, 0x6, '\x00', r2, r0, 0x0, 0x5, 0x3, 0xa, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)="a6", 0x1) sendfile(r4, r3, 0x0, 0x3ffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000b00)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xf, 0x0, "a69e87ad90ffb6b4b8ef2c88bd9316809d2c5e674fdae02795585a9392d651e2003294cc11be2b39bb2445999a58f0b90e69473ae585be8587529a0247ea14f5475bd7b699075f8172e05c49eb78bedd"}, 0xd8) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 906.183006ms ago: executing program 4 (id=11496): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="eb9818d8af17de00000000000004000000ff0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r9 = dup2(r8, r8) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r9, 0x1276, 0x0) 347.194448ms ago: executing program 3 (id=11497): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000001940)=""/4096, 0x1000, 0x0, &(0x7f0000000380)=""/100, 0x64}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0b030a00fcff020002004788aa96a13b", 0x10, 0x0, &(0x7f0000000340)={0x11, 0x1, r5, 0x1, 0x1, 0x6, @link_local}, 0x14) 324.42344ms ago: executing program 3 (id=11498): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000800)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000001900)=[{{&(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20040006) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff7850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='./file0/bus\x00', 0x20000042) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000200)={0x653, 0x6, 0x8}) rmdir(0x0) 262.745135ms ago: executing program 3 (id=11499): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c00)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000080)='bridge0\x00') 256.910686ms ago: executing program 3 (id=11500): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={{0x77359400}}) 235.771348ms ago: executing program 0 (id=11501): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000069105d000e791b899fb3e19c71a4cf0800000074b16ed4f5c9b4659a1375722416d26dfddd4ad83fa87cfd0ebb20619febdb11b8d9c785125e07f3832dc6f8fe4e559c5fe67a73d3fdaf007b5f83b6b404f547ebfe5979dc03a997f0f0bf925dcb760d0d60e5aefab0f9e2c221d37391a0da79e0cb6622b46a05a3a93a8fefcdd8a57643dcd1cff5b2e5d09793b72e8ba370a35eba136c8e000000000000000000000000000000002f6954a247e08b126774a3dc96d69bc4195cef1f60273d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x3f00000000000000, 0x0) 235.112278ms ago: executing program 3 (id=11502): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setresuid(0x0, 0x0, 0xee01) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, 0x0) 180.623083ms ago: executing program 0 (id=11503): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20f328f447cd4a47ac00000000000000000000000900010073797a30000000002c000000160a00000000000000000000000000000900010073797a30000000009438d69174da7e0b000000002c000000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 179.897853ms ago: executing program 3 (id=11504): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) execve(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x200}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r3 = eventfd(0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) fstat(r6, &(0x7f0000001600)) r7 = gettid() memfd_create(&(0x7f0000000000)='@,-&,$\x00', 0x20000007) tkill(r7, 0x2c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$eventfd(r3, &(0x7f00000001c0), 0x8) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) r9 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x27, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000010b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000001832000003000000000000000000000085100000feffffff185800000b0000000000000000000000183b00000100000000000000000000001834000003000000000000000000000018290000", @ANYRESOCT=0x0, @ANYBLOB="0000000002000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xd5, &(0x7f00000002c0)=""/213, 0x40f00, 0x28, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000003c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x6, 0xa080, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000440)=[r9, r9, r9, r9], &(0x7f0000000480)=[{0x0, 0x5, 0x0, 0x9}, {0x5, 0x5, 0xc, 0x9}, {0x0, 0x5, 0x5, 0x9}, {0x2, 0x3, 0x2, 0x5}, {0x2, 0x1, 0x1, 0xa}], 0x10, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='nmi_noise\x00', r10, 0x0, 0x1}, 0x18) 6.78239ms ago: executing program 2 (id=11505): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setgid(0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$l2tp6(0xa, 0x2, 0x73) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='.\x00') sendmmsg$inet6(r4, &(0x7f0000001e40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 6.118129ms ago: executing program 2 (id=11506): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 0s ago: executing program 2 (id=11507): socketpair(0x1e, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a5"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20f328f447cd4a47ac00000000000000000000000900010073797a30000000002c000000160a00000000000000000000000000000900010073797a30000000009438d69174da7e0b000000002c000000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/158], 0xa0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) kernel console output (not intermixed with test programs): a:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.103073][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.113388][ T9156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.124423][ T9156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.135312][ T9156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.146443][ T8578] hsr_slave_0: left promiscuous mode [ 934.152859][ T8578] hsr_slave_1: left promiscuous mode [ 934.161819][ T8578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.169606][ T8578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.183573][ T8578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.192114][ T8578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.202393][ T8578] veth1_macvtap: left promiscuous mode [ 934.207981][ T8578] veth0_macvtap: left promiscuous mode [ 934.213877][ T8578] veth1_vlan: left promiscuous mode [ 934.219881][ T8578] veth0_vlan: left promiscuous mode [ 934.318942][ T8578] team0 (unregistering): Port device team_slave_1 removed [ 934.334815][ T8578] team0 (unregistering): Port device team_slave_0 removed [ 934.394230][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.402095][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.410940][ T9574] bridge_slave_0: entered allmulticast mode [ 934.423202][ T9574] bridge_slave_0: entered promiscuous mode [ 934.435895][ T9156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.445936][ T9156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.455860][ T9156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.464783][ T9156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.477875][ T9796] loop1: detected capacity change from 0 to 512 [ 934.497054][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.504465][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.512687][ T9574] bridge_slave_1: entered allmulticast mode [ 934.519650][ T9574] bridge_slave_1: entered promiscuous mode [ 934.527801][ T9796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.541570][ T9796] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 934.588594][ T9574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.600094][ T9574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.641451][ T9847] x_tables: duplicate underflow at hook 1 [ 934.680116][ T9574] team0: Port device team_slave_0 added [ 934.688074][ T9574] team0: Port device team_slave_1 added [ 934.711355][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.719355][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.748981][ T9574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.761097][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.768671][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.795397][ T9574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.832001][ T9574] hsr_slave_0: entered promiscuous mode [ 934.842207][ T9574] hsr_slave_1: entered promiscuous mode [ 934.849123][ T9574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 934.856832][ T9574] Cannot create hsr debugfs directory [ 934.865022][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.872329][ T9903] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.891551][ T9922] bridge_slave_1: left allmulticast mode [ 934.897266][ T9922] bridge_slave_1: left promiscuous mode [ 934.903579][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.911417][ T9922] bridge_slave_0: left allmulticast mode [ 934.917311][ T9922] bridge_slave_0: left promiscuous mode [ 934.922990][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.174415][ T8120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.306114][ T9574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 935.315056][ T9574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 935.324037][ T9574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 935.332666][ T9574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 935.371851][ T9574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.387470][ T9574] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.398201][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.405315][ T8578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.415848][ T8575] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.423074][ T8575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.496290][ T9574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.512374][T10026] FAULT_INJECTION: forcing a failure. [ 935.512374][T10026] name failslab, interval 1, probability 0, space 0, times 0 [ 935.525210][T10026] CPU: 1 UID: 0 PID: 10026 Comm: syz.2.11132 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 935.535836][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 935.545994][T10026] Call Trace: [ 935.549289][T10026] [ 935.552321][T10026] dump_stack_lvl+0xf2/0x150 [ 935.557002][T10026] dump_stack+0x15/0x20 [ 935.561218][T10026] should_fail_ex+0x229/0x230 [ 935.565946][T10026] ? bpf_test_init+0xc7/0x170 [ 935.571375][T10026] should_failslab+0x8f/0xb0 [ 935.576224][T10026] __kmalloc_noprof+0xa5/0x370 [ 935.581028][T10026] bpf_test_init+0xc7/0x170 [ 935.585594][T10026] bpf_prog_test_run_xdp+0x321/0x8b0 [ 935.590994][T10026] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 935.591071][ T9574] veth0_vlan: entered promiscuous mode [ 935.596908][T10026] bpf_prog_test_run+0x261/0x3d0 [ 935.596936][T10026] __sys_bpf+0x400/0x7a0 [ 935.612059][T10026] __x64_sys_bpf+0x43/0x50 [ 935.614406][ T9574] veth1_vlan: entered promiscuous mode [ 935.616643][T10026] x64_sys_call+0x2625/0x2d60 [ 935.626832][T10026] do_syscall_64+0xc9/0x1c0 [ 935.631367][T10026] ? clear_bhb_loop+0x55/0xb0 [ 935.636108][T10026] ? clear_bhb_loop+0x55/0xb0 [ 935.640889][T10026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.646919][T10026] RIP: 0033:0x7f72770adef9 [ 935.651354][T10026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.670988][T10026] RSP: 002b:00007f7275d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 935.679408][T10026] RAX: ffffffffffffffda RBX: 00007f7277265f80 RCX: 00007f72770adef9 [ 935.687497][T10026] RDX: 0000000000000069 RSI: 00000000200002c0 RDI: 000000000000000a [ 935.695551][T10026] RBP: 00007f7275d27090 R08: 0000000000000000 R09: 0000000000000000 [ 935.703530][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.711524][T10026] R13: 0000000000000000 R14: 00007f7277265f80 R15: 00007ffcc3e18338 [ 935.719576][T10026] [ 935.724011][ T9574] veth0_macvtap: entered promiscuous mode [ 935.731746][ T9574] veth1_macvtap: entered promiscuous mode [ 935.745001][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.755565][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.765395][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.775896][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.785847][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.796294][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.806532][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.817025][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.827661][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.837059][T10036] smc: net device bond0 applied user defined pnetid SYZ0 [ 935.843084][T10037] tmpfs: Bad value for 'mpol' [ 935.844772][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.859411][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.869284][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.878584][T10040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.879843][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.888937][T10038] smc: net device bond0 erased user defined pnetid SYZ0 [ 935.897995][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.898016][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.925698][ T9574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.936270][ T9574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.937260][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.954819][ T9574] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.963717][ T9574] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.966925][T10043] loop2: detected capacity change from 0 to 256 [ 935.972411][ T9574] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.987763][ T9574] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.988566][T10043] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 936.004251][T10040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.049710][T10043] loop2: detected capacity change from 256 to 64 [ 936.057668][T10043] FAT-fs (loop2): unable to read inode block for updating (i_pos 2560) [ 936.064300][T10054] x_tables: duplicate underflow at hook 1 [ 936.069267][T10043] FAT-fs (loop2): Directory bread(block 40) failed [ 936.078795][T10043] FAT-fs (loop2): Directory bread(block 41) failed [ 936.086137][T10043] FAT-fs (loop2): Directory bread(block 42) failed [ 936.092831][T10043] FAT-fs (loop2): Directory bread(block 36) failed [ 936.100784][T10043] FAT-fs (loop2): Directory bread(block 40) failed [ 936.108426][T10043] FAT-fs (loop2): Directory bread(block 41) failed [ 936.116641][T10043] FAT-fs (loop2): Directory bread(block 42) failed [ 936.123263][T10043] FAT-fs (loop2): Directory bread(block 36) failed [ 936.130199][T10043] FAT-fs (loop2): Directory bread(block 40) failed [ 936.136844][T10043] FAT-fs (loop2): Directory bread(block 41) failed [ 936.217921][ T1816] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 936.227094][ T1816] FAT-fs (loop2): unable to read inode block for updating (i_pos 2560) [ 936.415094][T10076] loop3: detected capacity change from 0 to 512 [ 936.443977][T10076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.459891][T10076] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.478413][ T8578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.553641][ T8578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.662891][ T8578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.700971][T10081] chnl_net:caif_netlink_parms(): no params data found [ 936.716912][ T8578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.728451][T10194] FAULT_INJECTION: forcing a failure. [ 936.728451][T10194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.741721][T10194] CPU: 0 UID: 0 PID: 10194 Comm: syz.0.11144 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 936.752242][T10194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 936.762351][T10194] Call Trace: [ 936.765726][T10194] [ 936.768729][T10194] dump_stack_lvl+0xf2/0x150 [ 936.773363][T10194] dump_stack+0x15/0x20 [ 936.777623][T10194] should_fail_ex+0x229/0x230 [ 936.782321][T10194] should_fail+0xb/0x10 [ 936.786508][T10194] should_fail_usercopy+0x1a/0x20 [ 936.791600][T10194] _copy_from_user+0x1e/0xd0 [ 936.796224][T10194] copy_msghdr_from_user+0x54/0x2a0 [ 936.801556][T10194] __sys_sendmsg+0x171/0x270 [ 936.806273][T10194] __x64_sys_sendmsg+0x46/0x50 [ 936.811115][T10194] x64_sys_call+0x2689/0x2d60 [ 936.815835][T10194] do_syscall_64+0xc9/0x1c0 [ 936.820475][T10194] ? clear_bhb_loop+0x55/0xb0 [ 936.825164][T10194] ? clear_bhb_loop+0x55/0xb0 [ 936.829900][T10194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.835850][T10194] RIP: 0033:0x7f2fb2e4def9 [ 936.840312][T10194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.859926][T10194] RSP: 002b:00007f2fb1ac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 936.868389][T10194] RAX: ffffffffffffffda RBX: 00007f2fb3005f80 RCX: 00007f2fb2e4def9 [ 936.876418][T10194] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 936.884405][T10194] RBP: 00007f2fb1ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 936.892444][T10194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.900415][T10194] R13: 0000000000000000 R14: 00007f2fb3005f80 R15: 00007fffdb403758 [ 936.909010][T10194] [ 936.938131][T10222] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 936.963831][T10081] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.971057][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.978285][T10081] bridge_slave_0: entered allmulticast mode [ 936.984937][T10081] bridge_slave_0: entered promiscuous mode [ 936.994035][T10081] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.001177][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.008757][T10081] bridge_slave_1: entered allmulticast mode [ 937.015477][T10081] bridge_slave_1: entered promiscuous mode [ 937.044643][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.107893][T10295] x_tables: duplicate underflow at hook 1 [ 937.114893][ T8578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.134339][ T8578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.147468][ T8578] bond0 (unregistering): Released all slaves [ 937.172548][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.172607][ T9574] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.240088][ T8578] hsr_slave_0: left promiscuous mode [ 937.246022][ T8578] hsr_slave_1: left promiscuous mode [ 937.252046][ T8578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.259741][ T8578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.267846][ T8578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.275389][ T8578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.307174][ T8578] veth1_macvtap: left promiscuous mode [ 937.309340][T10340] FAULT_INJECTION: forcing a failure. [ 937.309340][T10340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.312679][ T8578] veth0_macvtap: left promiscuous mode [ 937.325766][T10340] CPU: 1 UID: 0 PID: 10340 Comm: syz.0.11155 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 937.333186][ T8578] veth1_vlan: left promiscuous mode [ 937.341681][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 937.341699][T10340] Call Trace: [ 937.341706][T10340] [ 937.341715][T10340] dump_stack_lvl+0xf2/0x150 [ 937.341839][T10340] dump_stack+0x15/0x20 [ 937.347179][ T8578] veth0_vlan: left promiscuous mode [ 937.357263][T10340] should_fail_ex+0x229/0x230 [ 937.357295][T10340] should_fail+0xb/0x10 [ 937.386489][T10340] should_fail_usercopy+0x1a/0x20 [ 937.391584][T10340] _copy_from_user+0x1e/0xd0 [ 937.396204][T10340] copy_msghdr_from_user+0x54/0x2a0 [ 937.401515][T10340] __sys_sendmmsg+0x21e/0x500 [ 937.406266][T10340] __x64_sys_sendmmsg+0x57/0x70 [ 937.411328][T10340] x64_sys_call+0xa49/0x2d60 [ 937.415956][T10340] do_syscall_64+0xc9/0x1c0 [ 937.420506][T10340] ? clear_bhb_loop+0x55/0xb0 [ 937.425336][T10340] ? clear_bhb_loop+0x55/0xb0 [ 937.430051][T10340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.436092][T10340] RIP: 0033:0x7f2fb2e4def9 [ 937.440590][T10340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.441709][T10338] loop3: detected capacity change from 0 to 128 [ 937.460409][T10340] RSP: 002b:00007f2fb1ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 937.460511][T10340] RAX: ffffffffffffffda RBX: 00007f2fb3005f80 RCX: 00007f2fb2e4def9 [ 937.460534][T10340] RDX: 000000000400008a RSI: 0000000020000180 RDI: 0000000000000004 [ 937.460555][T10340] RBP: 00007f2fb1ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 937.460569][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.460584][T10340] R13: 0000000000000000 R14: 00007f2fb3005f80 R15: 00007fffdb403758 [ 937.515544][T10340] [ 937.692267][T10357] x_tables: duplicate underflow at hook 1 [ 937.728714][ T8578] team0 (unregistering): Port device team_slave_1 removed [ 937.743373][ T8578] team0 (unregistering): Port device team_slave_0 removed [ 937.805139][T10081] team0: Port device team_slave_0 added [ 937.812795][T10081] team0: Port device team_slave_1 added [ 937.867993][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.875236][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.896001][T10402] loop1: detected capacity change from 0 to 256 [ 937.901421][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.909654][T10402] FAT-fs (loop1): bogus number of FAT sectors [ 937.922106][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.924364][T10402] FAT-fs (loop1): Can't find a valid FAT filesystem [ 937.931444][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.931480][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.979824][ T29] kauditd_printk_skb: 984 callbacks suppressed [ 937.979842][ T29] audit: type=1326 audit(1726862341.561:71014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.0.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 938.010371][ T29] audit: type=1326 audit(1726862341.561:71015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.0.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 938.034597][ T29] audit: type=1326 audit(1726862341.561:71016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.0.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 938.038460][T10409] loop4: detected capacity change from 0 to 512 [ 938.072960][T10402] loop1: detected capacity change from 0 to 128 [ 938.079741][ T29] audit: type=1326 audit(1726862341.561:71017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.0.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 938.103468][ T29] audit: type=1326 audit(1726862341.561:71018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.0.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 938.127097][ T29] audit: type=1326 audit(1726862341.561:71019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.0.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 938.151001][ T29] audit: type=1326 audit(1726862341.561:71020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.0.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 938.174840][ T29] audit: type=1326 audit(1726862341.561:71021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.0.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 938.198549][ T29] audit: type=1326 audit(1726862341.561:71022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.0.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 938.222566][ T29] audit: type=1326 audit(1726862341.561:71023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10395 comm="syz.0.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2fb2e4df33 code=0x7ffc0000 [ 938.258436][T10081] hsr_slave_0: entered promiscuous mode [ 938.276776][T10402] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 938.284757][T10402] FAT-fs (loop1): Filesystem has been set read-only [ 938.293587][T10081] hsr_slave_1: entered promiscuous mode [ 938.299917][T10402] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 938.300001][T10409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.309604][T10081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 938.329746][T10409] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 938.349574][T10402] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 938.357534][T10081] Cannot create hsr debugfs directory [ 938.682218][ T9156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.698815][ T8578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.763201][ T8578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.822921][T10081] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 938.839154][ T8578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.850593][T10081] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 938.861427][T10081] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 938.877145][T10081] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 938.895774][T10596] loop4: detected capacity change from 0 to 256 [ 938.903864][T10596] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 938.929714][ T8578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.957549][T10528] chnl_net:caif_netlink_parms(): no params data found [ 938.978090][T10596] loop4: detected capacity change from 256 to 64 [ 938.985721][T10694] FAT-fs (loop4): unable to read inode block for updating (i_pos 2560) [ 938.996183][T10596] FAT-fs (loop4): Directory bread(block 40) failed [ 939.002852][T10596] FAT-fs (loop4): Directory bread(block 41) failed [ 939.010059][T10596] FAT-fs (loop4): Directory bread(block 42) failed [ 939.016655][T10596] FAT-fs (loop4): Directory bread(block 36) failed [ 939.023360][T10596] FAT-fs (loop4): Directory bread(block 40) failed [ 939.030474][T10596] FAT-fs (loop4): Directory bread(block 41) failed [ 939.037077][T10596] FAT-fs (loop4): Directory bread(block 42) failed [ 939.043796][T10596] FAT-fs (loop4): Directory bread(block 36) failed [ 939.050696][T10596] FAT-fs (loop4): Directory bread(block 40) failed [ 939.057320][T10596] FAT-fs (loop4): Directory bread(block 41) failed [ 939.065685][T10528] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.072830][T10528] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.080114][T10528] bridge_slave_0: entered allmulticast mode [ 939.087755][T10528] bridge_slave_0: entered promiscuous mode [ 939.094715][T10528] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.102039][T10528] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.109306][T10528] bridge_slave_1: entered allmulticast mode [ 939.115946][T10528] bridge_slave_1: entered promiscuous mode [ 939.142365][T10528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.157947][T10528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.202338][ T11] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 939.211786][ T11] FAT-fs (loop4): unable to read inode block for updating (i_pos 2560) [ 939.242788][ T8578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.253346][ T8578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.264023][ T8578] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 939.275838][ T8578] bond0 (unregistering): Released all slaves [ 939.284435][T10528] team0: Port device team_slave_0 added [ 939.291033][T10528] team0: Port device team_slave_1 added [ 939.298580][T10081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.325993][T10528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.333044][T10528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.359077][T10528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.370917][ T8578] tipc: Disabling bearer [ 939.379046][ T8578] tipc: Disabling bearer [ 939.384611][ T8578] tipc: Left network mode [ 939.389616][T10081] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.396916][T10528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.403982][T10528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.430552][T10528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.450070][ T8578] hsr_slave_0: left promiscuous mode [ 939.456327][ T8578] hsr_slave_1: left promiscuous mode [ 939.462046][ T8578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.469547][ T8578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.481204][ T8578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.489364][ T8578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.499110][ T8578] veth1_macvtap: left promiscuous mode [ 939.504617][ T8578] veth0_macvtap: left promiscuous mode [ 939.510374][ T8578] veth1_vlan: left promiscuous mode [ 939.515649][ T8578] veth0_vlan: left promiscuous mode [ 939.602025][T10838] x_tables: duplicate underflow at hook 1 [ 939.660866][ T8578] team0 (unregistering): Port device team_slave_1 removed [ 939.671465][ T8578] team0 (unregistering): Port device team_slave_0 removed [ 939.716765][T10832] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.724036][T10832] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.734854][T10844] bridge_slave_1: left allmulticast mode [ 939.740609][T10844] bridge_slave_1: left promiscuous mode [ 939.746478][T10844] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.755243][T10844] bridge_slave_0: left allmulticast mode [ 939.761021][T10844] bridge_slave_0: left promiscuous mode [ 939.766676][T10844] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.819864][T29722] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.827050][T29722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.837889][T10528] hsr_slave_0: entered promiscuous mode [ 939.844334][T10528] hsr_slave_1: entered promiscuous mode [ 939.854232][T29722] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.861358][T29722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.895323][T10081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 939.905781][T10081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 940.019982][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.030179][T10833] chnl_net:caif_netlink_parms(): no params data found [ 940.075878][T10833] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.083002][T10833] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.090249][T10833] bridge_slave_0: entered allmulticast mode [ 940.096963][T10833] bridge_slave_0: entered promiscuous mode [ 940.104188][T10833] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.111275][T10833] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.118525][T10833] bridge_slave_1: entered allmulticast mode [ 940.125142][T10833] bridge_slave_1: entered promiscuous mode [ 940.146792][T10833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.159376][T10833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.190634][T11141] loop3: detected capacity change from 0 to 256 [ 940.198976][T11141] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 940.221580][T10833] team0: Port device team_slave_0 added [ 940.236123][T10833] team0: Port device team_slave_1 added [ 940.255267][T11141] loop3: detected capacity change from 256 to 64 [ 940.265510][T10833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.272565][T10833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.277355][T11141] FAT-fs (loop3): unable to read inode block for updating (i_pos 2560) [ 940.298580][T10833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.320924][T10833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.327968][T10833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.332446][T11141] FAT-fs (loop3): Directory bread(block 40) failed [ 940.353988][T10833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.371186][T11141] FAT-fs (loop3): Directory bread(block 41) failed [ 940.382034][T11141] FAT-fs (loop3): Directory bread(block 42) failed [ 940.388698][T11141] FAT-fs (loop3): Directory bread(block 36) failed [ 940.395479][T11141] FAT-fs (loop3): Directory bread(block 40) failed [ 940.402387][T11141] FAT-fs (loop3): Directory bread(block 41) failed [ 940.408973][T11141] FAT-fs (loop3): Directory bread(block 42) failed [ 940.415555][T11141] FAT-fs (loop3): Directory bread(block 36) failed [ 940.422472][T11141] FAT-fs (loop3): Directory bread(block 40) failed [ 940.429114][T11141] FAT-fs (loop3): Directory bread(block 41) failed [ 940.441413][ T8578] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.459982][T10528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 940.491984][T10833] hsr_slave_0: entered promiscuous mode [ 940.498303][T10833] hsr_slave_1: entered promiscuous mode [ 940.504416][T10833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 940.511959][T10833] Cannot create hsr debugfs directory [ 940.519059][T10528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 940.534359][ T8578] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.545779][T10081] veth0_vlan: entered promiscuous mode [ 940.552698][T10528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 940.563272][T10528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 940.582020][T10081] veth1_vlan: entered promiscuous mode [ 940.614321][ T1816] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 940.623467][ T1816] FAT-fs (loop3): unable to read inode block for updating (i_pos 2560) [ 940.633978][ T8578] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.654636][T10081] veth0_macvtap: entered promiscuous mode [ 940.675878][T10081] veth1_macvtap: entered promiscuous mode [ 940.687531][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.698033][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.707896][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.718347][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.728203][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.738712][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.751634][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.771254][ T8578] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.790080][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.800646][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.810827][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.821529][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.831713][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.842330][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.854097][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.872763][T10081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.882807][T10081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.891647][T10081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.900461][T10081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.960852][T10528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.061806][ T8578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.073888][ T8578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.084345][ T8578] bond0 (unregistering): Released all slaves [ 941.119361][T10528] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.139787][ T8575] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.146935][ T8575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.166592][ T8575] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.173717][ T8575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.199364][ T8578] hsr_slave_0: left promiscuous mode [ 941.209712][ T8578] hsr_slave_1: left promiscuous mode [ 941.215650][ T8578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.223124][ T8578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.234769][ T8578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.242435][ T8578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.252373][ T8578] veth1_macvtap: left promiscuous mode [ 941.257908][ T8578] veth0_macvtap: left promiscuous mode [ 941.263694][ T8578] veth1_vlan: left promiscuous mode [ 941.269030][ T8578] veth0_vlan: left promiscuous mode [ 941.358226][ T8578] team0 (unregistering): Port device team_slave_1 removed [ 941.370172][ T8578] team0 (unregistering): Port device team_slave_0 removed [ 941.492076][T10528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.519343][T11314] chnl_net:caif_netlink_parms(): no params data found [ 941.602126][T11495] x_tables: duplicate underflow at hook 1 [ 941.609090][T11314] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.616453][T11314] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.627451][T11314] bridge_slave_0: entered allmulticast mode [ 941.634847][T11314] bridge_slave_0: entered promiscuous mode [ 941.644187][T11314] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.651396][T11314] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.659943][T11314] bridge_slave_1: entered allmulticast mode [ 941.666752][T11314] bridge_slave_1: entered promiscuous mode [ 941.682536][T10528] veth0_vlan: entered promiscuous mode [ 941.708404][T10528] veth1_vlan: entered promiscuous mode [ 941.715705][T11314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.729501][T11314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.759715][T11314] team0: Port device team_slave_0 added [ 941.767364][T11314] team0: Port device team_slave_1 added [ 941.788830][T11314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.795960][T11314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.822195][T11314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.833312][T10833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 941.842836][T11314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.849864][T11314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.875893][T11314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.889214][T10833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 941.899856][T10833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 941.909147][T10833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 941.939514][T11314] hsr_slave_0: entered promiscuous mode [ 941.946219][T11314] hsr_slave_1: entered promiscuous mode [ 941.952193][T11314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 941.960116][T11314] Cannot create hsr debugfs directory [ 941.991050][ T8575] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.015359][T10528] veth0_macvtap: entered promiscuous mode [ 942.030250][T10528] veth1_macvtap: entered promiscuous mode [ 942.051691][ T8575] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.081691][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.092181][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.102008][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.112496][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.122436][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.132959][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.145905][T10528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.166002][T11691] loop2: detected capacity change from 0 to 256 [ 942.167571][T10833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.179577][T11691] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 942.184222][T10833] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.205875][ T8575] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.218383][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.228986][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.238239][T11691] loop2: detected capacity change from 256 to 64 [ 942.238874][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.246109][T11691] FAT-fs (loop2): unable to read inode block for updating (i_pos 2560) [ 942.255551][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.255572][T10528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.255589][T10528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.256890][T10528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.269743][T11691] FAT-fs (loop2): Directory bread(block 40) failed [ 942.275247][ T6230] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.292266][T11691] FAT-fs (loop2): Directory bread(block 41) failed [ 942.294066][ T6230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.301201][T11691] FAT-fs (loop2): Directory bread(block 42) failed [ 942.322701][T10833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 942.345777][T10833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 942.358029][T11691] FAT-fs (loop2): Directory bread(block 36) failed [ 942.365284][T11691] FAT-fs (loop2): Directory bread(block 40) failed [ 942.366108][T10528] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.371945][T11691] FAT-fs (loop2): Directory bread(block 41) failed [ 942.380603][T10528] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.388758][T11691] FAT-fs (loop2): Directory bread(block 42) failed [ 942.395933][T10528] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.405433][T11691] FAT-fs (loop2): Directory bread(block 36) failed [ 942.411149][T10528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.417705][T11691] FAT-fs (loop2): Directory bread(block 40) failed [ 942.433040][T11691] FAT-fs (loop2): Directory bread(block 41) failed [ 942.440758][ T8575] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.453728][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.460862][ T6230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.624134][ T6214] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 942.638572][ T6214] FAT-fs (loop2): unable to read inode block for updating (i_pos 2560) [ 942.641482][ T8575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.662958][ T8575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.680633][ T8575] bond0 (unregistering): Released all slaves [ 942.709554][T10833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.711292][T11734] vhci_hcd: invalid port number 68 [ 942.721606][T11734] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 942.765611][ T8575] hsr_slave_0: left promiscuous mode [ 942.773442][ T8575] hsr_slave_1: left promiscuous mode [ 942.796060][ T8575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.803691][ T8575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.812942][ T8575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 942.820364][ T8575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.839209][ T8575] veth1_macvtap: left promiscuous mode [ 942.844740][ T8575] veth0_macvtap: left promiscuous mode [ 942.850358][ T8575] veth1_vlan: left promiscuous mode [ 942.855626][ T8575] veth0_vlan: left promiscuous mode [ 942.970486][ T8575] team0 (unregistering): Port device team_slave_1 removed [ 942.982521][ T8575] team0 (unregistering): Port device team_slave_0 removed [ 943.132320][T10833] veth0_vlan: entered promiscuous mode [ 943.141287][T10833] veth1_vlan: entered promiscuous mode [ 943.154659][T10833] veth0_macvtap: entered promiscuous mode [ 943.161979][T10833] veth1_macvtap: entered promiscuous mode [ 943.174915][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.185429][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.195275][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.205721][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.215570][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.226039][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.237075][T10833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.270124][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.280691][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.290616][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.301121][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.310995][T10833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.321444][T10833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.332318][T10833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.339706][T11314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 943.348888][T11314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 943.362178][T10833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.370984][T10833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.379790][T10833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.388520][T10833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.399763][T11314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 943.409159][T11314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 943.477083][T11314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.489904][T11314] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.509122][T11314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 943.519638][T11314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 943.534428][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.541568][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.588668][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.595803][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.648405][T11781] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.655824][T11781] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.687959][T11786] bridge_slave_1: left allmulticast mode [ 943.693797][T11786] bridge_slave_1: left promiscuous mode [ 943.699563][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.711361][T11786] bridge_slave_0: left allmulticast mode [ 943.717143][T11786] bridge_slave_0: left promiscuous mode [ 943.722941][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.731635][T11792] loop1: detected capacity change from 0 to 512 [ 943.759115][T11792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.772428][T11792] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.787497][ T29] kauditd_printk_skb: 843 callbacks suppressed [ 943.787514][ T29] audit: type=1400 audit(1726862346.913:71867): avc: denied { setattr } for pid=11791 comm="syz.1.11206" path="/2/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 943.816496][T11792] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #19: comm syz.1.11206: corrupted inode contents [ 943.832343][ T29] audit: type=1400 audit(1726862346.941:71868): avc: denied { ioctl } for pid=11791 comm="syz.1.11206" path="/2/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop1" ino=18 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 943.859997][T11792] EXT4-fs error (device loop1): ext4_dirty_inode:6011: inode #19: comm syz.1.11206: mark_inode_dirty error [ 943.882629][T11314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.883048][T11792] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #19: comm syz.1.11206: corrupted inode contents [ 943.905328][T11792] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3007: inode #19: comm syz.1.11206: mark_inode_dirty error [ 943.938509][T11792] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3010: inode #19: comm syz.1.11206: mark inode dirty (error -117) [ 943.997673][T11792] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117) [ 944.041676][T11809] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 944.050621][T11782] chnl_net:caif_netlink_parms(): no params data found [ 944.064584][T10528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.079339][ T8575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.111749][ T29] audit: type=1326 audit(1726862347.208:71869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11920 comm="syz.1.11208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7fd1def9 code=0x7ffc0000 [ 944.135711][ T29] audit: type=1326 audit(1726862347.208:71870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11920 comm="syz.1.11208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7fd1def9 code=0x7ffc0000 [ 944.159931][ T29] audit: type=1326 audit(1726862347.245:71871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11920 comm="syz.1.11208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b7fd1def9 code=0x7ffc0000 [ 944.159964][ T29] audit: type=1326 audit(1726862347.245:71872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11920 comm="syz.1.11208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7fd1def9 code=0x7ffc0000 [ 944.159990][ T29] audit: type=1326 audit(1726862347.245:71873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11920 comm="syz.1.11208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b7fd1c890 code=0x7ffc0000 [ 944.234610][ T29] audit: type=1326 audit(1726862347.328:71874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11920 comm="syz.1.11208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7fd1def9 code=0x7ffc0000 [ 944.239762][T11314] veth0_vlan: entered promiscuous mode [ 944.258561][ T29] audit: type=1326 audit(1726862347.328:71875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11920 comm="syz.1.11208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7fd1def9 code=0x7ffc0000 [ 944.289411][T11965] loop1: detected capacity change from 0 to 256 [ 944.297786][T11965] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 944.309533][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.310015][ T29] audit: type=1326 audit(1726862347.402:71876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11920 comm="syz.1.11208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4b7fd1def9 code=0x7ffc0000 [ 944.316680][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.350326][T11782] bridge_slave_0: entered allmulticast mode [ 944.356929][T11782] bridge_slave_0: entered promiscuous mode [ 944.368686][ T8575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.386659][T11314] veth1_vlan: entered promiscuous mode [ 944.393556][T11782] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.400765][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.405868][T11947] loop1: detected capacity change from 256 to 64 [ 944.408508][T11782] bridge_slave_1: entered allmulticast mode [ 944.415457][T11947] FAT-fs (loop1): unable to read inode block for updating (i_pos 2560) [ 944.421340][T11782] bridge_slave_1: entered promiscuous mode [ 944.434588][T11947] FAT-fs (loop1): Directory bread(block 40) failed [ 944.441913][T11947] FAT-fs (loop1): Directory bread(block 41) failed [ 944.448616][T11947] FAT-fs (loop1): Directory bread(block 42) failed [ 944.458964][T11947] FAT-fs (loop1): Directory bread(block 36) failed [ 944.467597][T11947] FAT-fs (loop1): Directory bread(block 40) failed [ 944.475309][ T8575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.476056][T11947] FAT-fs (loop1): Directory bread(block 41) failed [ 944.493386][T11947] FAT-fs (loop1): Directory bread(block 42) failed [ 944.507842][T11947] FAT-fs (loop1): Directory bread(block 36) failed [ 944.515449][T11947] FAT-fs (loop1): Directory bread(block 40) failed [ 944.522152][T11947] FAT-fs (loop1): Directory bread(block 41) failed [ 944.543618][ T8575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.559410][T11782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.571649][T11314] veth0_macvtap: entered promiscuous mode [ 944.581943][T11782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.605828][T11314] veth1_macvtap: entered promiscuous mode [ 944.615886][T11782] team0: Port device team_slave_0 added [ 944.623087][T11782] team0: Port device team_slave_1 added [ 944.644694][T11782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.651679][T11782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.677905][T11782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.689412][T11782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.696475][T11782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.722576][T11782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.737159][T11314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.748184][T11314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.758140][T11314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.768969][T11314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.779106][T11314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.789576][T11314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.799429][T11314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.810125][T11314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.821115][ T6214] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 944.822992][T11314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.837704][ T6214] FAT-fs (loop1): unable to read inode block for updating (i_pos 2560) [ 944.862430][T11314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.873018][T11314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.882943][T11314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.893387][T11314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.903211][T11314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.913808][T11314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.923926][T11314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.934376][T11314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.945651][T11314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.978105][T11314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.987015][T11314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.996047][T11314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.004993][T11314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.017271][T11782] hsr_slave_0: entered promiscuous mode [ 945.024268][T11782] hsr_slave_1: entered promiscuous mode [ 945.030395][T11782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.038146][T11782] Cannot create hsr debugfs directory [ 945.049718][T12093] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11215'. [ 945.071975][ T8575] bridge_slave_1: left allmulticast mode [ 945.077697][ T8575] bridge_slave_1: left promiscuous mode [ 945.083467][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.092960][ T8575] bridge_slave_0: left allmulticast mode [ 945.098793][ T8575] bridge_slave_0: left promiscuous mode [ 945.104632][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.221072][ T8575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.232004][ T8575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.245146][ T8575] bond0 (unregistering): Released all slaves [ 945.272264][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11219'. [ 945.285811][T12133] sch_tbf: burst 88 is lower than device team0 mtu (1514) ! [ 945.328624][T12133] loop4: detected capacity change from 0 to 512 [ 945.337511][ T8575] hsr_slave_0: left promiscuous mode [ 945.344015][ T8575] hsr_slave_1: left promiscuous mode [ 945.347158][T12133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 945.354151][T12167] loop3: detected capacity change from 0 to 512 [ 945.362828][T12133] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 945.379174][ T8575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.386974][ T8575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.400897][ T8575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.408587][ T8575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.427750][ T8575] veth1_macvtap: left promiscuous mode [ 945.433278][ T8575] veth0_macvtap: left promiscuous mode [ 945.439057][ T8575] veth1_vlan: left promiscuous mode [ 945.444316][ T8575] veth0_vlan: left promiscuous mode [ 945.459216][T10833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.473332][T12171] loop3: detected capacity change from 0 to 128 [ 945.545738][T12179] loop4: detected capacity change from 0 to 2048 [ 945.579955][ T8575] team0 (unregistering): Port device team_slave_1 removed [ 945.590948][ T8575] team0 (unregistering): Port device team_slave_0 removed [ 945.599987][T12179] loop4: p2 < > [ 945.938742][T12234] chnl_net:caif_netlink_parms(): no params data found [ 945.984485][T12234] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.992968][T12234] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.001888][T12234] bridge_slave_0: entered allmulticast mode [ 946.009522][T12234] bridge_slave_0: entered promiscuous mode [ 946.018696][T12234] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.028614][T12234] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.039760][T12234] bridge_slave_1: entered allmulticast mode [ 946.047658][T12234] bridge_slave_1: entered promiscuous mode [ 946.080633][T12234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.092818][T12234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.132310][T12234] team0: Port device team_slave_0 added [ 946.150093][T12234] team0: Port device team_slave_1 added [ 946.181786][T12234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.191193][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.230071][T12234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.245703][T12234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.257708][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.294365][T12234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.317567][T11782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 946.334418][ T8575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.350092][T11782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 946.367068][T11782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 946.392290][T11782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 946.406220][ T8575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.425757][T12234] hsr_slave_0: entered promiscuous mode [ 946.432099][T12234] hsr_slave_1: entered promiscuous mode [ 946.438307][T12234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 946.445964][T12234] Cannot create hsr debugfs directory [ 946.457608][ T8575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.530455][ T8575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.575614][T11782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.598313][T11782] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.614747][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.622678][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.635818][ T8575] bridge_slave_1: left allmulticast mode [ 946.643599][ T8575] bridge_slave_1: left promiscuous mode [ 946.651298][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.662123][ T8575] bridge_slave_0: left allmulticast mode [ 946.668367][ T8575] bridge_slave_0: left promiscuous mode [ 946.675228][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.712294][T12604] loop3: detected capacity change from 0 to 128 [ 946.788812][T12612] x_tables: duplicate underflow at hook 1 [ 946.805486][ T8575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.823121][ T8575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.836511][ T8575] bond0 (unregistering): Released all slaves [ 946.854052][T12610] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.862350][T12610] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.882244][T12615] bridge_slave_1: left allmulticast mode [ 946.889512][T12615] bridge_slave_1: left promiscuous mode [ 946.897560][T12615] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.908304][T12624] FAULT_INJECTION: forcing a failure. [ 946.908304][T12624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 946.927162][T12624] CPU: 1 UID: 0 PID: 12624 Comm: syz.0.11241 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 946.942963][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 946.955363][T12624] Call Trace: [ 946.959589][T12624] [ 946.963344][T12624] dump_stack_lvl+0xf2/0x150 [ 946.968661][T12624] dump_stack+0x15/0x20 [ 946.973403][T12624] should_fail_ex+0x229/0x230 [ 946.980569][T12624] should_fail+0xb/0x10 [ 946.985290][T12624] should_fail_usercopy+0x1a/0x20 [ 946.990903][T12624] _copy_to_user+0x1e/0xa0 [ 946.996312][T12624] simple_read_from_buffer+0xa0/0x110 [ 947.003058][T12624] proc_fail_nth_read+0xf9/0x140 [ 947.011982][T12624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 947.023621][T12624] vfs_read+0x195/0x720 [ 947.028900][T12624] ? __rcu_read_unlock+0x4e/0x70 [ 947.035781][T12624] ? __fget_files+0x1d4/0x210 [ 947.042406][T12624] ksys_read+0xeb/0x1b0 [ 947.047920][T12624] __x64_sys_read+0x42/0x50 [ 947.054144][T12624] x64_sys_call+0x27d3/0x2d60 [ 947.061272][T12624] do_syscall_64+0xc9/0x1c0 [ 947.066760][T12624] ? clear_bhb_loop+0x55/0xb0 [ 947.073183][T12624] ? clear_bhb_loop+0x55/0xb0 [ 947.079348][T12624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.086396][T12624] RIP: 0033:0x7f2fb2e4c93c [ 947.091994][T12624] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 947.119481][T12624] RSP: 002b:00007f2fb1ac7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 947.128542][T12624] RAX: ffffffffffffffda RBX: 00007f2fb3005f80 RCX: 00007f2fb2e4c93c [ 947.137321][T12624] RDX: 000000000000000f RSI: 00007f2fb1ac70a0 RDI: 0000000000000004 [ 947.147777][T12624] RBP: 00007f2fb1ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 947.157187][T12624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.167799][T12624] R13: 0000000000000000 R14: 00007f2fb3005f80 R15: 00007fffdb403758 [ 947.181952][T12624] [ 947.191622][T12615] bridge_slave_0: left allmulticast mode [ 947.199519][T12615] bridge_slave_0: left promiscuous mode [ 947.206888][T12615] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.233309][T12628] loop4: detected capacity change from 0 to 512 [ 947.244675][T12628] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 947.278085][T12628] EXT4-fs error (device loop4): __ext4_get_inode_loc:4433: comm syz.4.11243: Invalid inode table block 0 in block_group 0 [ 947.296171][T12628] EXT4-fs (loop4): get root inode failed [ 947.303598][T12628] EXT4-fs (loop4): mount failed [ 947.314437][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.327652][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.351617][ T8575] hsr_slave_0: left promiscuous mode [ 947.361099][ T8575] hsr_slave_1: left promiscuous mode [ 947.368287][ T8575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.380743][ T8575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.389408][ T8575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 947.399330][ T8575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.410730][ T8575] veth1_macvtap: left promiscuous mode [ 947.417404][T12637] loop4: detected capacity change from 0 to 128 [ 947.418995][ T8575] veth0_macvtap: left promiscuous mode [ 947.432964][ T8575] veth1_vlan: left promiscuous mode [ 947.443046][ T8575] veth0_vlan: left promiscuous mode [ 947.537828][ T8575] team0 (unregistering): Port device team_slave_1 removed [ 947.549758][ T8575] team0 (unregistering): Port device team_slave_0 removed [ 947.589511][T12630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11242'. [ 947.606241][T12641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11245'. [ 947.681293][T12647] Process accounting resumed [ 947.687167][T11782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.755521][T12669] FAULT_INJECTION: forcing a failure. [ 947.755521][T12669] name failslab, interval 1, probability 0, space 0, times 0 [ 947.761701][T11782] veth0_vlan: entered promiscuous mode [ 947.768406][T12669] CPU: 1 UID: 0 PID: 12669 Comm: syz.3.11248 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 947.782202][T11782] veth1_vlan: entered promiscuous mode [ 947.784351][T12669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 947.799521][T11782] veth0_macvtap: entered promiscuous mode [ 947.799867][T12669] Call Trace: [ 947.799876][T12669] [ 947.807515][T11782] veth1_macvtap: entered promiscuous mode [ 947.809040][T12669] dump_stack_lvl+0xf2/0x150 [ 947.809084][T12669] dump_stack+0x15/0x20 [ 947.816846][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.817761][T12669] should_fail_ex+0x229/0x230 [ 947.822436][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.826558][T12669] ? __alloc_skb+0x10b/0x310 [ 947.837205][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.841966][T12669] should_failslab+0x8f/0xb0 [ 947.852303][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.856769][T12669] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 947.867895][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.872908][T12669] __alloc_skb+0x10b/0x310 [ 947.884822][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.892574][T12669] netlink_alloc_large_skb+0xad/0xe0 [ 947.907946][T11782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.908881][T12669] netlink_sendmsg+0x3b4/0x6e0 [ 947.929971][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.932048][T12669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 947.937871][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.937888][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.949740][T12669] __sock_sendmsg+0x140/0x180 [ 947.949778][T12669] ____sys_sendmsg+0x312/0x410 [ 947.955559][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.955584][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.965567][T12669] __sys_sendmsg+0x1dd/0x270 [ 947.965625][T12669] __x64_sys_sendmsg+0x46/0x50 [ 947.977126][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.982200][T12669] x64_sys_call+0x2689/0x2d60 [ 947.982236][T12669] do_syscall_64+0xc9/0x1c0 [ 947.995274][T11782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.998595][T12669] ? clear_bhb_loop+0x55/0xb0 [ 947.998638][T12669] ? clear_bhb_loop+0x55/0xb0 [ 948.017954][T11782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.019142][T12669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.019183][T12669] RIP: 0033:0x7fd5abeedef9 [ 948.026441][T11782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.037415][T12669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.037467][T12669] RSP: 002b:00007fd5aab40038 EFLAGS: 00000246 [ 948.042915][T11782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.048679][T12669] ORIG_RAX: 000000000000002e [ 948.048694][T12669] RAX: ffffffffffffffda RBX: 00007fd5ac0a6058 RCX: 00007fd5abeedef9 [ 948.059433][T11782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.065602][T12669] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 948.204756][T12669] RBP: 00007fd5aab40090 R08: 0000000000000000 R09: 0000000000000000 [ 948.215811][T12669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.226653][T12669] R13: 0000000000000000 R14: 00007fd5ac0a6058 R15: 00007ffccfd430c8 [ 948.236985][T12669] [ 948.291617][T12687] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.300072][T12687] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.317217][T12234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 948.332503][T12687] bridge_slave_1: left allmulticast mode [ 948.339143][T12687] bridge_slave_1: left promiscuous mode [ 948.345781][T12687] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.354635][T12687] bridge_slave_0: left allmulticast mode [ 948.361873][T12687] bridge_slave_0: left promiscuous mode [ 948.369374][T12687] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.417623][T12234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 948.429084][T12234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 948.458361][T12234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 948.512224][T12234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.526388][T12234] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.540510][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.548220][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.568306][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.577920][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.663696][T12234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.697810][T12719] x_tables: duplicate underflow at hook 1 [ 948.774337][T12234] veth0_vlan: entered promiscuous mode [ 948.787085][T12234] veth1_vlan: entered promiscuous mode [ 948.813279][T12234] veth0_macvtap: entered promiscuous mode [ 948.843382][T12234] veth1_macvtap: entered promiscuous mode [ 948.883065][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.893810][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.903802][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.914974][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.925218][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.935906][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.945724][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.957287][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.968147][T12234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.981840][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.992495][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.002339][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.012885][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.022817][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.033335][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.043193][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.053724][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.069146][T12234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.071177][T12742] x_tables: duplicate underflow at hook 1 [ 949.078229][T12234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.091132][T12234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.100132][T12234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.110399][T12234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.131526][T12745] program syz.0.11264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 949.179111][T12752] hub 9-0:1.0: USB hub found [ 949.183829][T12752] hub 9-0:1.0: 8 ports detected [ 949.193018][T12753] loop1: detected capacity change from 0 to 512 [ 949.226322][T12752] loop3: detected capacity change from 0 to 2048 [ 949.242959][T12752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.256496][ T29] kauditd_printk_skb: 1178 callbacks suppressed [ 949.256530][ T29] audit: type=1400 audit(1726862351.969:73055): avc: denied { setattr } for pid=12741 comm="syz.3.11263" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 949.290097][ T29] audit: type=1326 audit(1726862351.988:73056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 949.314104][ T29] audit: type=1326 audit(1726862351.988:73057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 949.337867][ T29] audit: type=1326 audit(1726862351.988:73058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 949.361668][ T29] audit: type=1326 audit(1726862351.988:73059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 949.385461][ T29] audit: type=1326 audit(1726862351.988:73060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12771 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb2e4def9 code=0x7ffc0000 [ 949.492551][T12786] netlink: 'syz.0.11270': attribute type 10 has an invalid length. [ 949.495051][T12789] FAULT_INJECTION: forcing a failure. [ 949.495051][T12789] name failslab, interval 1, probability 0, space 0, times 0 [ 949.513140][T12789] CPU: 1 UID: 0 PID: 12789 Comm: syz.1.11271 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 949.523767][T12789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 949.533970][T12789] Call Trace: [ 949.537263][T12789] [ 949.540887][T12789] dump_stack_lvl+0xf2/0x150 [ 949.545520][T12789] dump_stack+0x15/0x20 [ 949.549784][T12789] should_fail_ex+0x229/0x230 [ 949.554495][T12789] ? sel_netport_sid+0x1e0/0x420 [ 949.559456][T12789] should_failslab+0x8f/0xb0 [ 949.564157][T12789] __kmalloc_cache_noprof+0x4b/0x2a0 [ 949.569510][T12789] sel_netport_sid+0x1e0/0x420 [ 949.574287][T12789] selinux_socket_connect_helper+0x37c/0x4b0 [ 949.580291][T12789] selinux_socket_connect+0x31/0x70 [ 949.585527][T12789] security_socket_connect+0x47/0x80 [ 949.590864][T12789] __sys_connect+0x12f/0x1b0 [ 949.595477][T12789] __x64_sys_connect+0x41/0x50 [ 949.600337][T12789] x64_sys_call+0x2220/0x2d60 [ 949.605036][T12789] do_syscall_64+0xc9/0x1c0 [ 949.609549][T12789] ? clear_bhb_loop+0x55/0xb0 [ 949.614666][T12789] ? clear_bhb_loop+0x55/0xb0 [ 949.619390][T12789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.625303][T12789] RIP: 0033:0x7fedeb3bdef9 [ 949.629724][T12789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.649394][T12789] RSP: 002b:00007fedea037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 949.657886][T12789] RAX: ffffffffffffffda RBX: 00007fedeb575f80 RCX: 00007fedeb3bdef9 [ 949.666046][T12789] RDX: 0000000000000010 RSI: 0000000020ccb000 RDI: 0000000000000004 [ 949.674023][T12789] RBP: 00007fedea037090 R08: 0000000000000000 R09: 0000000000000000 [ 949.682058][T12789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.690038][T12789] R13: 0000000000000000 R14: 00007fedeb575f80 R15: 00007ffefbd5f058 [ 949.698081][T12789] [ 949.712614][T12786] veth0_macvtap: left promiscuous mode [ 949.716074][ T29] audit: type=1326 audit(1726862352.385:73061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.4.11272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110f8adef9 code=0x7ffc0000 [ 949.744624][T12786] veth0_macvtap: entered promiscuous mode [ 949.753819][T12786] team0: Device macvtap0 failed to register rx_handler [ 949.755913][T12792] rdma_op ffff88810b521d80 conn xmit_rdma 0000000000000000 [ 949.768520][T12786] veth0_macvtap: left promiscuous mode [ 949.774335][ T29] audit: type=1326 audit(1726862352.403:73062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.4.11272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f110f8adef9 code=0x7ffc0000 [ 949.798268][ T29] audit: type=1326 audit(1726862352.412:73063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.4.11272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110f8adef9 code=0x7ffc0000 [ 949.822615][ T29] audit: type=1326 audit(1726862352.412:73064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12791 comm="syz.4.11272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110f8adef9 code=0x7ffc0000 [ 949.847867][T12803] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11274'. [ 949.858805][T12795] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11274'. [ 949.897212][T12810] FAULT_INJECTION: forcing a failure. [ 949.897212][T12810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.910516][T12810] CPU: 1 UID: 0 PID: 12810 Comm: syz.1.11277 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 949.921335][T12810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 949.931449][T12810] Call Trace: [ 949.934882][T12810] [ 949.937818][T12810] dump_stack_lvl+0xf2/0x150 [ 949.943007][T12810] dump_stack+0x15/0x20 [ 949.947336][T12810] should_fail_ex+0x229/0x230 [ 949.952229][T12810] should_fail+0xb/0x10 [ 949.956669][T12810] should_fail_usercopy+0x1a/0x20 [ 949.961702][T12810] _copy_to_user+0x1e/0xa0 [ 949.966182][T12810] simple_read_from_buffer+0xa0/0x110 [ 949.971745][T12810] proc_fail_nth_read+0xf9/0x140 [ 949.976887][T12810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 949.983437][T12810] vfs_read+0x195/0x720 [ 949.987942][T12810] ? hci_sock_bind+0x193/0x9e0 [ 949.992806][T12810] ? __rcu_read_unlock+0x4e/0x70 [ 949.997972][T12810] ? __fget_files+0x1d4/0x210 [ 950.002926][T12810] ksys_read+0xeb/0x1b0 [ 950.007139][T12810] __x64_sys_read+0x42/0x50 [ 950.011825][T12810] x64_sys_call+0x27d3/0x2d60 [ 950.016527][T12810] do_syscall_64+0xc9/0x1c0 [ 950.021090][T12810] ? clear_bhb_loop+0x55/0xb0 [ 950.026035][T12810] ? clear_bhb_loop+0x55/0xb0 [ 950.030948][T12810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.036884][T12810] RIP: 0033:0x7fedeb3bc93c [ 950.041325][T12810] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 950.061089][T12810] RSP: 002b:00007fedea037030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 950.069570][T12810] RAX: ffffffffffffffda RBX: 00007fedeb575f80 RCX: 00007fedeb3bc93c [ 950.077720][T12810] RDX: 000000000000000f RSI: 00007fedea0370a0 RDI: 0000000000000007 [ 950.085775][T12810] RBP: 00007fedea037090 R08: 0000000000000000 R09: 0000000000000000 [ 950.093879][T12810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.101906][T12810] R13: 0000000000000000 R14: 00007fedeb575f80 R15: 00007ffefbd5f058 [ 950.110233][T12810] [ 950.125725][T11314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.174931][T12821] 9pnet: Could not find request transport: tc [ 950.792131][T12831] loop4: detected capacity change from 0 to 128 [ 950.799544][T12831] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 950.870637][T12833] xt_CT: No such helper "snmp_trap" [ 950.877342][T12847] netlink: 'syz.4.11286': attribute type 10 has an invalid length. [ 950.886939][T12847] veth0_macvtap: left promiscuous mode [ 950.895644][T12847] veth0_macvtap: entered promiscuous mode [ 950.904427][T12847] team0: Device macvtap0 failed to register rx_handler [ 950.912487][T12847] veth0_macvtap: left promiscuous mode [ 950.918245][T12851] syz.2.11287[12851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 950.918745][T12851] syz.2.11287[12851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 950.995806][T12868] netem: change failed [ 951.027060][T12868] bond1: entered promiscuous mode [ 951.032211][T12868] bond1: entered allmulticast mode [ 951.038160][T12868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 951.050495][T12868] bond1 (unregistering): Released all slaves [ 951.175513][T12957] FAULT_INJECTION: forcing a failure. [ 951.175513][T12957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.178858][T12952] netlink: 'syz.1.11296': attribute type 5 has an invalid length. [ 951.188954][T12957] CPU: 1 UID: 0 PID: 12957 Comm: syz.3.11298 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 951.207651][T12957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 951.218109][T12957] Call Trace: [ 951.221416][T12957] [ 951.224567][T12957] dump_stack_lvl+0xf2/0x150 [ 951.229550][T12957] dump_stack+0x15/0x20 [ 951.234046][T12957] should_fail_ex+0x229/0x230 [ 951.239625][T12957] should_fail+0xb/0x10 [ 951.244073][T12957] should_fail_usercopy+0x1a/0x20 [ 951.249795][T12957] _copy_from_user+0x1e/0xd0 [ 951.255110][T12957] __sys_bpf+0x14e/0x7a0 [ 951.259862][T12957] __x64_sys_bpf+0x43/0x50 [ 951.265114][T12957] x64_sys_call+0x2625/0x2d60 [ 951.270019][T12957] do_syscall_64+0xc9/0x1c0 [ 951.275168][T12957] ? clear_bhb_loop+0x55/0xb0 [ 951.280335][T12957] ? clear_bhb_loop+0x55/0xb0 [ 951.285533][T12957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.291841][T12957] RIP: 0033:0x7fd5abeedef9 [ 951.296482][T12957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.316651][T12957] RSP: 002b:00007fd5aab61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 951.325146][T12957] RAX: ffffffffffffffda RBX: 00007fd5ac0a5f80 RCX: 00007fd5abeedef9 [ 951.333758][T12957] RDX: 0000000000000020 RSI: 0000000020000400 RDI: 0000000000000002 [ 951.341768][T12957] RBP: 00007fd5aab61090 R08: 0000000000000000 R09: 0000000000000000 [ 951.349891][T12957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.358389][T12957] R13: 0000000000000000 R14: 00007fd5ac0a5f80 R15: 00007ffccfd430c8 [ 951.366984][T12957] [ 951.376351][T12970] 9pnet_fd: p9_fd_create_tcp (12970): problem connecting socket to 127.0.0.1 [ 951.386575][T12970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 951.395297][T12970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 951.403819][T12970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 951.413789][T12970] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 951.421028][T12970] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 951.428701][T12970] vhci_hcd vhci_hcd.0: Device attached [ 951.436800][T12970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 951.447808][T12970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 951.457050][T12970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 951.468248][T12970] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(25) [ 951.475599][T12970] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 951.483258][T12970] vhci_hcd vhci_hcd.0: Device attached [ 951.490308][T12982] netlink: 'syz.1.11304': attribute type 10 has an invalid length. [ 951.490421][T12983] vhci_hcd: connection closed [ 951.490775][T12973] vhci_hcd: connection closed [ 951.498996][T12982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11304'. [ 951.515611][ T6214] vhci_hcd: stop threads [ 951.520582][T12982] bridge0: port 3(ipvlan0) entered blocking state [ 951.522295][ T6214] vhci_hcd: release socket [ 951.522306][ T6214] vhci_hcd: disconnect device [ 951.529051][T12982] bridge0: port 3(ipvlan0) entered disabled state [ 951.529352][T12982] ipvlan0: entered allmulticast mode [ 951.534923][ T6214] vhci_hcd: stop threads [ 951.538758][T12982] veth0_vlan: entered allmulticast mode [ 951.539336][T12982] ipvlan0: left allmulticast mode [ 951.545668][ T6214] vhci_hcd: release socket [ 951.550979][T12982] veth0_vlan: left allmulticast mode [ 951.555198][T12982] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 951.555289][ T6214] vhci_hcd: disconnect device [ 951.604346][T12990] pim6reg1: entered promiscuous mode [ 951.610228][T12990] pim6reg1: entered allmulticast mode [ 951.697766][T13009] netlink: 'syz.3.11309': attribute type 10 has an invalid length. [ 951.705989][T13009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11309'. [ 951.717258][T13009] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 951.767641][T13013] FAULT_INJECTION: forcing a failure. [ 951.767641][T13013] name failslab, interval 1, probability 0, space 0, times 0 [ 951.781044][T13013] CPU: 1 UID: 0 PID: 13013 Comm: syz.3.11311 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 951.791622][T13013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 951.802075][T13013] Call Trace: [ 951.805410][T13013] [ 951.808450][T13013] dump_stack_lvl+0xf2/0x150 [ 951.813472][T13013] dump_stack+0x15/0x20 [ 951.817835][T13013] should_fail_ex+0x229/0x230 [ 951.822694][T13013] ? __se_sys_mount+0xf7/0x2d0 [ 951.827675][T13013] should_failslab+0x8f/0xb0 [ 951.832304][T13013] __kmalloc_cache_noprof+0x4b/0x2a0 [ 951.837702][T13013] __se_sys_mount+0xf7/0x2d0 [ 951.842309][T13013] ? fput+0x14e/0x190 [ 951.846533][T13013] ? ksys_write+0x178/0x1b0 [ 951.851139][T13013] __x64_sys_mount+0x67/0x80 [ 951.855745][T13013] x64_sys_call+0x203e/0x2d60 [ 951.860519][T13013] do_syscall_64+0xc9/0x1c0 [ 951.865124][T13013] ? clear_bhb_loop+0x55/0xb0 [ 951.869900][T13013] ? clear_bhb_loop+0x55/0xb0 [ 951.875065][T13013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.881288][T13013] RIP: 0033:0x7fd5abeedef9 [ 951.885713][T13013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.907234][T13013] RSP: 002b:00007fd5aab61038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 951.916043][T13013] RAX: ffffffffffffffda RBX: 00007fd5ac0a5f80 RCX: 00007fd5abeedef9 [ 951.924287][T13013] RDX: 00000000200004c0 RSI: 0000000020000300 RDI: 0000000000000000 [ 951.932720][T13013] RBP: 00007fd5aab61090 R08: 0000000020000700 R09: 0000000000000000 [ 951.940699][T13013] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 951.948811][T13013] R13: 0000000000000001 R14: 00007fd5ac0a5f80 R15: 00007ffccfd430c8 [ 951.958138][T13013] [ 952.113977][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11316'. [ 952.218090][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11320'. [ 952.218533][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11320'. [ 952.275930][T13056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13056 comm=syz.0.11324 [ 952.314261][T13058] FAULT_INJECTION: forcing a failure. [ 952.314261][T13058] name failslab, interval 1, probability 0, space 0, times 0 [ 952.328131][T13058] CPU: 0 UID: 0 PID: 13058 Comm: syz.2.11325 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 952.339716][T13058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 952.352731][T13058] Call Trace: [ 952.358052][T13058] [ 952.362983][T13058] dump_stack_lvl+0xf2/0x150 [ 952.369227][T13058] dump_stack+0x15/0x20 [ 952.375250][T13058] should_fail_ex+0x229/0x230 [ 952.380411][T13058] ? resv_map_alloc+0x57/0x190 [ 952.385199][T13058] should_failslab+0x8f/0xb0 [ 952.390093][T13058] __kmalloc_cache_noprof+0x4b/0x2a0 [ 952.396167][T13058] resv_map_alloc+0x57/0x190 [ 952.401483][T13058] hugetlbfs_get_inode+0x6e/0x2b0 [ 952.407651][T13058] hugetlb_file_setup+0x188/0x3c0 [ 952.413479][T13058] ksys_mmap_pgoff+0x172/0x330 [ 952.420109][T13058] x64_sys_call+0x1884/0x2d60 [ 952.426442][T13058] do_syscall_64+0xc9/0x1c0 [ 952.435307][T13058] ? clear_bhb_loop+0x55/0xb0 [ 952.440975][T13058] ? clear_bhb_loop+0x55/0xb0 [ 952.446475][T13058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.453200][T13058] RIP: 0033:0x7fdb5099def9 [ 952.460135][T13058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.482518][T13058] RSP: 002b:00007fdb4f617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 952.492654][T13058] RAX: ffffffffffffffda RBX: 00007fdb50b55f80 RCX: 00007fdb5099def9 [ 952.502349][T13058] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020400000 [ 952.512139][T13058] RBP: 00007fdb4f617090 R08: ffffffffffffffff R09: 0000000000000000 [ 952.522302][T13058] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 952.533445][T13058] R13: 0000000000000000 R14: 00007fdb50b55f80 R15: 00007ffcfaa4eac8 [ 952.542808][T13058] [ 952.618810][T13067] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11329'. [ 952.657560][T13076] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 952.666296][T13076] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 952.726078][T13084] syzkaller1: entered promiscuous mode [ 952.732021][T13084] syzkaller1: entered allmulticast mode [ 952.937481][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11334'. [ 952.946720][T13095] netlink: 'syz.0.11334': attribute type 15 has an invalid length. [ 952.956035][T13095] xt_TCPMSS: Only works on TCP SYN packets [ 953.032107][T13107] loop4: detected capacity change from 0 to 128 [ 953.127546][T13119] FAULT_INJECTION: forcing a failure. [ 953.127546][T13119] name failslab, interval 1, probability 0, space 0, times 0 [ 953.140557][T13119] CPU: 1 UID: 0 PID: 13119 Comm: syz.3.11341 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 953.151181][T13119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 953.161286][T13119] Call Trace: [ 953.164634][T13119] [ 953.167564][T13119] dump_stack_lvl+0xf2/0x150 [ 953.172208][T13119] dump_stack+0x15/0x20 [ 953.176417][T13119] should_fail_ex+0x229/0x230 [ 953.181112][T13119] ? ucma_query+0x2b6/0x9e0 [ 953.185647][T13119] should_failslab+0x8f/0xb0 [ 953.190258][T13119] __kmalloc_noprof+0xa5/0x370 [ 953.195111][T13119] ? ucma_get_ctx+0x130/0x160 [ 953.199807][T13119] ucma_query+0x2b6/0x9e0 [ 953.204186][T13119] ? path_openat+0x1a5a/0x1fa0 [ 953.208955][T13119] ? _parse_integer+0x27/0x30 [ 953.213647][T13119] ? kstrtoull+0x110/0x140 [ 953.218148][T13119] ? kstrtouint+0x77/0xc0 [ 953.222543][T13119] ? kstrtouint_from_user+0xb0/0xe0 [ 953.227749][T13119] ? should_fail_ex+0xd7/0x230 [ 953.232541][T13119] ucma_write+0x1a4/0x240 [ 953.237046][T13119] ? __pfx_ucma_write+0x10/0x10 [ 953.241975][T13119] vfs_write+0x26c/0x910 [ 953.246236][T13119] ? __rcu_read_unlock+0x4e/0x70 [ 953.251213][T13119] ? __fget_files+0x1d4/0x210 [ 953.255968][T13119] ksys_write+0xeb/0x1b0 [ 953.260371][T13119] __x64_sys_write+0x42/0x50 [ 953.265112][T13119] x64_sys_call+0x27dd/0x2d60 [ 953.269808][T13119] do_syscall_64+0xc9/0x1c0 [ 953.274385][T13119] ? clear_bhb_loop+0x55/0xb0 [ 953.279172][T13119] ? clear_bhb_loop+0x55/0xb0 [ 953.283876][T13119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.289788][T13119] RIP: 0033:0x7fd5abeedef9 [ 953.294207][T13119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.313840][T13119] RSP: 002b:00007fd5aab61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 953.322406][T13119] RAX: ffffffffffffffda RBX: 00007fd5ac0a5f80 RCX: 00007fd5abeedef9 [ 953.330390][T13119] RDX: 0000000000000018 RSI: 00000000200000c0 RDI: 0000000000000003 [ 953.338466][T13119] RBP: 00007fd5aab61090 R08: 0000000000000000 R09: 0000000000000000 [ 953.346444][T13119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.354418][T13119] R13: 0000000000000000 R14: 00007fd5ac0a5f80 R15: 00007ffccfd430c8 [ 953.362403][T13119] [ 953.449289][T13131] IPv6: NLM_F_CREATE should be specified when creating new route [ 953.468387][T13134] loop3: detected capacity change from 0 to 128 [ 953.532078][T13151] FAULT_INJECTION: forcing a failure. [ 953.532078][T13151] name failslab, interval 1, probability 0, space 0, times 0 [ 953.544863][T13151] CPU: 1 UID: 0 PID: 13151 Comm: syz.2.11351 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 953.555423][T13151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 953.565524][T13151] Call Trace: [ 953.568825][T13151] [ 953.571776][T13151] dump_stack_lvl+0xf2/0x150 [ 953.576498][T13151] dump_stack+0x15/0x20 [ 953.580735][T13151] should_fail_ex+0x229/0x230 [ 953.585436][T13151] ? sock_alloc_inode+0x34/0xa0 [ 953.590328][T13151] should_failslab+0x8f/0xb0 [ 953.594955][T13151] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 953.600786][T13151] sock_alloc_inode+0x34/0xa0 [ 953.605493][T13151] ? __pfx_sock_alloc_inode+0x10/0x10 [ 953.611050][T13151] alloc_inode+0x3c/0x160 [ 953.615456][T13151] new_inode_pseudo+0x15/0x20 [ 953.620164][T13151] __sock_create+0x12b/0x4f0 [ 953.624807][T13151] __sys_socketpair+0x1be/0x430 [ 953.629739][T13151] __x64_sys_socketpair+0x52/0x60 [ 953.634805][T13151] x64_sys_call+0x1c1e/0x2d60 [ 953.639549][T13151] do_syscall_64+0xc9/0x1c0 [ 953.644164][T13151] ? clear_bhb_loop+0x55/0xb0 [ 953.648917][T13151] ? clear_bhb_loop+0x55/0xb0 [ 953.653632][T13151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.659594][T13151] RIP: 0033:0x7fdb5099fe4a [ 953.664027][T13151] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.683680][T13151] RSP: 002b:00007fdb4f616f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 953.692138][T13151] RAX: ffffffffffffffda RBX: 00007fdb50b55f00 RCX: 00007fdb5099fe4a [ 953.700308][T13151] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 953.708312][T13151] RBP: 00007fdb4f617090 R08: 0000000000000000 R09: 0000000000000000 [ 953.716292][T13151] R10: 00007fdb4f616f98 R11: 0000000000000246 R12: 0000000000000002 [ 953.724356][T13151] R13: 0000000000000000 R14: 00007fdb50b55f80 R15: 00007ffcfaa4eac8 [ 953.732444][T13151] [ 953.735865][T13151] socket: no more sockets [ 953.954794][T13175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.963420][T13175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.367256][T13189] netlink: 'syz.2.11361': attribute type 6 has an invalid length. [ 954.378990][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11361'. [ 954.540519][T13208] IPv6: Can't replace route, no match found [ 954.577802][T13210] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 954.584492][T13210] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 954.592585][T13210] vhci_hcd vhci_hcd.0: Device attached [ 954.602426][T13213] vhci_hcd: connection closed [ 954.604400][ T6214] vhci_hcd: stop threads [ 954.613731][ T6214] vhci_hcd: release socket [ 954.618501][ T6214] vhci_hcd: disconnect device [ 954.675309][T13220] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.682623][T13220] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.717096][T13220] bridge_slave_1: left allmulticast mode [ 954.722885][T13220] bridge_slave_1: left promiscuous mode [ 954.728715][T13220] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.744894][ T29] kauditd_printk_skb: 1077 callbacks suppressed [ 954.744913][ T29] audit: type=1326 audit(1726862356.980:74142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5099def9 code=0x7ffc0000 [ 954.775163][ T29] audit: type=1326 audit(1726862356.980:74143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb5099def9 code=0x7ffc0000 [ 954.799081][ T29] audit: type=1326 audit(1726862356.980:74144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5099def9 code=0x7ffc0000 [ 954.823360][ T29] audit: type=1326 audit(1726862356.980:74145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fdb5099def9 code=0x7ffc0000 [ 954.847103][ T29] audit: type=1326 audit(1726862356.980:74146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5099def9 code=0x7ffc0000 [ 954.870812][ T29] audit: type=1326 audit(1726862356.980:74147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fdb5099def9 code=0x7ffc0000 [ 954.903643][T13224] loop3: detected capacity change from 0 to 512 [ 954.911100][ T29] audit: type=1326 audit(1726862357.173:74148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5099def9 code=0x7ffc0000 [ 954.934985][ T29] audit: type=1326 audit(1726862357.173:74149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.2.11370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5099def9 code=0x7ffc0000 [ 954.995911][T13220] bridge_slave_0: left allmulticast mode [ 955.001656][T13220] bridge_slave_0: left promiscuous mode [ 955.007394][T13220] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.062319][T13224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.091567][T13224] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.120848][ T29] audit: type=1326 audit(1726862357.367:74150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.4.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110f8adef9 code=0x7ffc0000 [ 955.144774][ T29] audit: type=1326 audit(1726862357.367:74151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.4.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110f8adef9 code=0x7ffc0000 [ 955.241875][T13237] xt_TCPMSS: Only works on TCP SYN packets [ 955.473046][T11314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.511789][T13249] loop3: detected capacity change from 0 to 1024 [ 955.539197][T13249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.585890][T13275] netlink: 'syz.2.11381': attribute type 10 has an invalid length. [ 955.596259][T11314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.609161][T13275] team0: Failed to send options change via netlink (err -105) [ 955.616721][T13275] team0: Port device netdevsim1 added [ 955.623990][T13275] netlink: 'syz.2.11381': attribute type 10 has an invalid length. [ 955.632583][T13275] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 955.646657][T13275] team0: Failed to send options change via netlink (err -105) [ 955.654652][T13275] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 955.671591][T13275] team0: Port device netdevsim1 removed [ 955.683837][T13275] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 955.837546][ T3339] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x4 [ 955.845318][ T3339] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x2 [ 955.853125][ T3339] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x3 [ 955.861236][ T3339] hid-generic 0000:3000000:0000.0025: hidraw0: HID v0.00 Device [sy] on syz0 [ 956.317978][T13329] loop1: detected capacity change from 0 to 2048 [ 956.457688][T13329] loop1: p1 < > p4 [ 956.517915][T13329] loop1: p4 size 8388608 extends beyond EOD, truncated [ 956.541519][T13329] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 956.548983][T13329] macvtap1: entered promiscuous mode [ 956.554461][T13329] macvtap1: entered allmulticast mode [ 956.559908][T13329] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 956.571571][T13329] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 956.579002][T13329] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 956.761500][T13343] loop3: detected capacity change from 0 to 2048 [ 956.803906][T13346] loop4: detected capacity change from 0 to 8192 [ 956.811865][T13343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.828850][T13346] FAULT_INJECTION: forcing a failure. [ 956.828850][T13346] name failslab, interval 1, probability 0, space 0, times 0 [ 956.841951][T13346] CPU: 0 UID: 0 PID: 13346 Comm: syz.4.11395 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 956.852555][T13346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 956.862721][T13346] Call Trace: [ 956.866104][T13346] [ 956.869206][T13346] dump_stack_lvl+0xf2/0x150 [ 956.873901][T13346] dump_stack+0x15/0x20 [ 956.878150][T13346] should_fail_ex+0x229/0x230 [ 956.882883][T13346] ? getname_flags+0x81/0x3b0 [ 956.887653][T13346] should_failslab+0x8f/0xb0 [ 956.892455][T13346] kmem_cache_alloc_noprof+0x4c/0x290 [ 956.897937][T13346] getname_flags+0x81/0x3b0 [ 956.902489][T13346] __x64_sys_rename+0x40/0x70 [ 956.907276][T13346] x64_sys_call+0x1a84/0x2d60 [ 956.911994][T13346] do_syscall_64+0xc9/0x1c0 [ 956.916516][T13346] ? clear_bhb_loop+0x55/0xb0 [ 956.921292][T13346] ? clear_bhb_loop+0x55/0xb0 [ 956.926023][T13346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.931948][T13346] RIP: 0033:0x7f110f8adef9 [ 956.936378][T13346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.956016][T13346] RSP: 002b:00007f110e521038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 956.964437][T13346] RAX: ffffffffffffffda RBX: 00007f110fa65f80 RCX: 00007f110f8adef9 [ 956.972415][T13346] RDX: 0000000000000000 RSI: 0000000020001300 RDI: 0000000020000040 [ 956.980395][T13346] RBP: 00007f110e521090 R08: 0000000000000000 R09: 0000000000000000 [ 956.988382][T13346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.996383][T13346] R13: 0000000000000000 R14: 00007f110fa65f80 R15: 00007fff04ffbfd8 [ 957.004459][T13346] [ 957.008953][T13343] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 957.034114][T11314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.108975][T13381] FAULT_INJECTION: forcing a failure. [ 957.108975][T13381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.122146][T13381] CPU: 0 UID: 0 PID: 13381 Comm: syz.0.11404 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 957.132818][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 957.142952][T13381] Call Trace: [ 957.146262][T13381] [ 957.149304][T13381] dump_stack_lvl+0xf2/0x150 [ 957.153968][T13381] dump_stack+0x15/0x20 [ 957.158189][T13381] should_fail_ex+0x229/0x230 [ 957.162968][T13381] should_fail+0xb/0x10 [ 957.167218][T13381] should_fail_usercopy+0x1a/0x20 [ 957.172255][T13381] _copy_from_user+0x1e/0xd0 [ 957.176860][T13381] do_sock_getsockopt+0xd3/0x260 [ 957.181902][T13381] __sys_getsockopt+0x18e/0x200 [ 957.186805][T13381] __x64_sys_getsockopt+0x66/0x80 [ 957.191850][T13381] x64_sys_call+0x11cd/0x2d60 [ 957.196627][T13381] do_syscall_64+0xc9/0x1c0 [ 957.201593][T13381] ? clear_bhb_loop+0x55/0xb0 [ 957.206290][T13381] ? clear_bhb_loop+0x55/0xb0 [ 957.211157][T13381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.217199][T13381] RIP: 0033:0x7f2fb2e4def9 [ 957.221680][T13381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.241366][T13381] RSP: 002b:00007f2fb1ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 957.249948][T13381] RAX: ffffffffffffffda RBX: 00007f2fb3005f80 RCX: 00007f2fb2e4def9 [ 957.258185][T13381] RDX: 0000000000000006 RSI: 0000000000000084 RDI: 0000000000000003 [ 957.266169][T13381] RBP: 00007f2fb1ac7090 R08: 0000000020000340 R09: 0000000000000000 [ 957.274149][T13381] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 957.282177][T13381] R13: 0000000000000000 R14: 00007f2fb3005f80 R15: 00007fffdb403758 [ 957.290414][T13381] [ 957.359628][T13400] bond1: entered promiscuous mode [ 957.364711][T13400] bond1: entered allmulticast mode [ 957.370002][T13400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 957.394640][T13444] syzkaller1: entered promiscuous mode [ 957.400254][T13444] syzkaller1: entered allmulticast mode [ 957.625598][T13460] loop1: detected capacity change from 0 to 512 [ 957.654396][T13460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.692383][T13460] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.976650][T13474] FAULT_INJECTION: forcing a failure. [ 957.976650][T13474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.977170][T13458] coredump: 488(syz.0.11406): written to core: VMAs: 29, size 89030656; core: 60019374 bytes, pos 89038848 [ 957.989866][T13474] CPU: 1 UID: 0 PID: 13474 Comm: syz.4.11412 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 958.013234][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 958.023378][T13474] Call Trace: [ 958.026720][T13474] [ 958.029670][T13474] dump_stack_lvl+0xf2/0x150 [ 958.034831][T13474] dump_stack+0x15/0x20 [ 958.039108][T13474] should_fail_ex+0x229/0x230 [ 958.044137][T13474] should_fail+0xb/0x10 [ 958.048395][T13474] should_fail_usercopy+0x1a/0x20 [ 958.053439][T13474] _copy_from_user+0x1e/0xd0 [ 958.058086][T13474] get_timespec64+0x49/0x140 [ 958.062745][T13474] __se_sys_nanosleep+0x46/0x2c0 [ 958.067704][T13474] ? __bpf_trace_sys_enter+0x9/0x10 [ 958.073006][T13474] ? trace_sys_enter+0x65/0xa0 [ 958.077882][T13474] __x64_sys_nanosleep+0x31/0x40 [ 958.083025][T13474] x64_sys_call+0x1e18/0x2d60 [ 958.087735][T13474] do_syscall_64+0xc9/0x1c0 [ 958.092346][T13474] ? clear_bhb_loop+0x55/0xb0 [ 958.097114][T13474] ? clear_bhb_loop+0x55/0xb0 [ 958.101934][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.108419][T13474] RIP: 0033:0x7f110f8adef9 [ 958.112874][T13474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.132593][T13474] RSP: 002b:00007f110e521038 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 958.141097][T13474] RAX: ffffffffffffffda RBX: 00007f110fa65f80 RCX: 00007f110f8adef9 [ 958.149079][T13474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 958.157056][T13474] RBP: 00007f110e521090 R08: 0000000000000000 R09: 0000000000000000 [ 958.165107][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.173431][T13474] R13: 0000000000000000 R14: 00007f110fa65f80 R15: 00007fff04ffbfd8 [ 958.181506][T13474] [ 958.353238][T13500] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11417'. [ 958.374238][T13499] IPv6: Can't replace route, no match found [ 958.392135][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11421'. [ 958.405193][T12234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.462508][T13514] FAULT_INJECTION: forcing a failure. [ 958.462508][T13514] name failslab, interval 1, probability 0, space 0, times 0 [ 958.475232][T13514] CPU: 0 UID: 0 PID: 13514 Comm: syz.4.11425 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 958.485887][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 958.495965][T13514] Call Trace: [ 958.499275][T13514] [ 958.502221][T13514] dump_stack_lvl+0xf2/0x150 [ 958.506859][T13514] dump_stack+0x15/0x20 [ 958.511198][T13514] should_fail_ex+0x229/0x230 [ 958.515899][T13514] ? getname_flags+0x81/0x3b0 [ 958.520609][T13514] should_failslab+0x8f/0xb0 [ 958.525238][T13514] kmem_cache_alloc_noprof+0x4c/0x290 [ 958.530641][T13514] getname_flags+0x81/0x3b0 [ 958.535237][T13514] __x64_sys_renameat2+0x6e/0xa0 [ 958.540211][T13514] x64_sys_call+0x2cf1/0x2d60 [ 958.544962][T13514] do_syscall_64+0xc9/0x1c0 [ 958.549487][T13514] ? clear_bhb_loop+0x55/0xb0 [ 958.554200][T13514] ? clear_bhb_loop+0x55/0xb0 [ 958.558974][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.564992][T13514] RIP: 0033:0x7f110f8adef9 [ 958.569425][T13514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.589161][T13514] RSP: 002b:00007f110e521038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 958.597592][T13514] RAX: ffffffffffffffda RBX: 00007f110fa65f80 RCX: 00007f110f8adef9 [ 958.605623][T13514] RDX: ffffffffffffffff RSI: 0000000020000140 RDI: ffffffffffffffff [ 958.613612][T13514] RBP: 00007f110e521090 R08: 0000000000000000 R09: 0000000000000000 [ 958.621660][T13514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.629648][T13514] R13: 0000000000000000 R14: 00007f110fa65f80 R15: 00007fff04ffbfd8 [ 958.637752][T13514] [ 958.836325][T13526] loop4: detected capacity change from 0 to 512 [ 958.843267][T13526] EXT4-fs (loop4): blocks per group (32768) and clusters per group (248) inconsistent [ 959.487774][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11439'. [ 959.712228][T13578] tun0: tun_chr_ioctl cmd 2147767511 [ 959.777088][T13584] syz.4.11442[13584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 959.777164][T13584] syz.4.11442[13584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 959.789175][T13585] @: renamed from bond0 (while UP) [ 959.820677][T13584] loop4: detected capacity change from 0 to 2048 [ 959.842294][T13584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.855022][T13584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.149227][T13606] netlink: 176 bytes leftover after parsing attributes in process `syz.0.11449'. [ 960.316334][T13624] wg1: entered promiscuous mode [ 960.321285][T13624] wg1: entered allmulticast mode [ 960.327821][T13624] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 960.519889][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 960.519906][ T29] audit: type=1326 audit(1726862362.350:74357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13660 comm="syz.2.11467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb5099def9 code=0x0 [ 960.593918][T13669] FAULT_INJECTION: forcing a failure. [ 960.593918][T13669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.607229][T13669] CPU: 1 UID: 0 PID: 13669 Comm: syz.1.11470 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 960.617863][T13669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 960.628020][T13669] Call Trace: [ 960.631308][T13669] [ 960.634292][T13669] dump_stack_lvl+0xf2/0x150 [ 960.638909][T13669] dump_stack+0x15/0x20 [ 960.643189][T13669] should_fail_ex+0x229/0x230 [ 960.648032][T13669] should_fail+0xb/0x10 [ 960.652199][T13669] should_fail_usercopy+0x1a/0x20 [ 960.657264][T13669] _copy_from_user+0x1e/0xd0 [ 960.661946][T13669] move_addr_to_kernel+0x82/0x120 [ 960.667009][T13669] __sys_connect+0x74/0x1b0 [ 960.671615][T13669] __x64_sys_connect+0x41/0x50 [ 960.676388][T13669] x64_sys_call+0x2220/0x2d60 [ 960.681150][T13669] do_syscall_64+0xc9/0x1c0 [ 960.685742][T13669] ? clear_bhb_loop+0x55/0xb0 [ 960.690464][T13669] ? clear_bhb_loop+0x55/0xb0 [ 960.695326][T13669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.701301][T13669] RIP: 0033:0x7fedeb3bdef9 [ 960.705795][T13669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.725645][T13669] RSP: 002b:00007fedea037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 960.734139][T13669] RAX: ffffffffffffffda RBX: 00007fedeb575f80 RCX: 00007fedeb3bdef9 [ 960.742213][T13669] RDX: 000000000000001e RSI: 0000000020000140 RDI: 0000000000000005 [ 960.750204][T13669] RBP: 00007fedea037090 R08: 0000000000000000 R09: 0000000000000000 [ 960.758264][T13669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.766294][T13669] R13: 0000000000000000 R14: 00007fedeb575f80 R15: 00007ffefbd5f058 [ 960.774469][T13669] [ 960.832164][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11473'. [ 960.850375][T13677] loop3: detected capacity change from 0 to 512 [ 960.923111][T13677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.953219][T13677] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.968014][ T29] audit: type=1326 audit(1726862362.774:74358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13688 comm="syz.4.11475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f110f8adef9 code=0x0 [ 961.408840][T11314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.432503][T13711] 9pnet_fd: Insufficient options for proto=fd [ 961.439641][ T29] audit: type=1400 audit(1726862363.199:74359): avc: denied { read } for pid=13710 comm="syz.3.11481" path="socket:[196389]" dev="sockfs" ino=196389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 961.466460][ T29] audit: type=1400 audit(1726862363.235:74360): avc: denied { setopt } for pid=13710 comm="syz.3.11481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 961.486391][ T29] audit: type=1326 audit(1726862363.235:74361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13710 comm="syz.3.11481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5abeedef9 code=0x0 [ 961.653019][T13716] bond1: entered promiscuous mode [ 961.658141][T13716] bond1: entered allmulticast mode [ 961.663433][T13716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 961.674449][T13716] bond1 (unregistering): Released all slaves [ 961.838293][T13789] sctp: [Deprecated]: syz.1.11486 (pid 13789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 961.838293][T13789] Use struct sctp_sack_info instead [ 962.392992][T13822] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11490'. [ 962.646032][T13830] loop3: detected capacity change from 0 to 512 [ 962.694583][T13830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.713929][T13830] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.958053][T13843] loop1: detected capacity change from 0 to 512 [ 962.994860][T13843] EXT4-fs: Ignoring removed i_version option [ 963.038366][T13843] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 963.103445][T13843] EXT4-fs (loop1): 1 truncate cleaned up [ 963.157277][T13843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.205758][ T29] audit: type=1400 audit(1726862364.832:74362): avc: denied { write } for pid=13842 comm="syz.1.11495" path="/38/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 963.303047][ T29] audit: type=1326 audit(1726862364.924:74363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13842 comm="syz.1.11495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeb3bdef9 code=0x7ffc0000 [ 963.342519][ T29] audit: type=1326 audit(1726862364.924:74364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13842 comm="syz.1.11495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeb3bdef9 code=0x7ffc0000 [ 963.366844][ T29] audit: type=1326 audit(1726862364.924:74365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13842 comm="syz.1.11495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedeb3bdef9 code=0x7ffc0000 [ 963.391020][ T29] audit: type=1326 audit(1726862364.924:74366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13842 comm="syz.1.11495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeb3bdef9 code=0x7ffc0000 [ 963.475783][T11314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.752648][T13877] loop3: detected capacity change from 0 to 8192 [ 963.862715][ T23] ================================================================== [ 963.870828][ T23] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 963.878052][ T23] [ 963.880389][ T23] race at unknown origin, with assert no writes to 0xffff8881042610e8 of 4 bytes by task 23 on cpu 1: [ 963.891344][ T23] dequeue_entities+0x6df/0x760 [ 963.896234][ T23] pick_next_task_fair+0x7d/0x410 [ 963.901312][ T23] __schedule+0x27c/0x940 [ 963.905665][ T23] schedule+0x55/0xc0 [ 963.909863][ T23] smpboot_thread_fn+0x37b/0x4c0 [ 963.915091][ T23] kthread+0x1d1/0x210 [ 963.919291][ T23] ret_from_fork+0x4b/0x60 [ 963.923832][ T23] ret_from_fork_asm+0x1a/0x30 [ 963.928719][ T23] [ 963.931095][ T23] value changed: 0x00000000 -> 0x00000001 [ 963.937082][ T23] [ 963.939401][ T23] Reported by Kernel Concurrency Sanitizer on: [ 963.945634][ T23] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 963.955959][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 963.966151][ T23] ================================================================== [ 963.991793][T12234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.